Privacy for travel endpoints /Might already be implemented
Have requests to navitia,... be split into three parts: start point - first change, first change - endpoint, endpoint - final destination. My feeling is that as only itinerary stitches all three requests together it may become more private as in the provider log files there isn't a single trip anymore. Might need some more thorough thinking though...